Headline
GHSA-g66v-3v62-g375: RosarioSIS improper access control vulnerability
RosarioSIS prior to version 10.9.3 has a vulnerability that allows a user to return to a page containing personally identifiable information (PII) and sensitive information even after logging out of the application by using the browser’s back button.
RosarioSIS improper access control vulnerability
Moderate severity GitHub Reviewed Published Apr 21, 2023 to the GitHub Advisory Database • Updated Apr 24, 2023
Related news
CVE-2023-2202: Security Fix browser loading cached page when page full reload (F5) +… · francoisjacquet/rosariosis@6433946
Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.